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DETAILED ACTION 

1 . Claims 64-1 36 are pending in the instant application. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

3. The application has been amended as follows: 
Claims 1-63 (Cancelled) 

64. (Currently amended) A method of storing a data set on a storage device having one 
or more portions of random data comprising: 

determining using a process dependent upon a user input passphrase, a first storage 
writing process starting location at a first offset within a- one of the portions of random 
data for Initiating a first storage writing process for storing a file Index; 
determining a second storage writing process starting location at a second offset within 
a -one of the portions of random data for initiating a second storage writing process for 
storing the data set, said second offset determined using a process that is independent 
of a-the process used to generate said first offset; 
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encrypting the data set; 

writing the encrypted data set using the second storage writing process beginning at the 
second storage writing process starting location in a -one of the portions of random data; 
creating a-the file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 
encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location in one of the file -portions of random data. 

65. (Currently amended) A method of operating a computer to store a data set on a 
storage device, comprising: 

determining a first location at a first offset within the storage device for initiating a first 

storage writing process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage device for storing the data set, said second offset determined using a 
process that is independent of a process used to generate said first offset; 

encrypting the data set; 

writing the encrypted data set using the-a second storage writing process beginning at 
the second storage writing process starting location in a portion of random data; 
creating a-the file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 
encrypting the file index; and 
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writing tlie encrypted file index using the first storage writing process beginning at tlie 
first storage writing process starting location. 

66. (Previously presented) The method according to claim 64 in which the determining 

the first storage writing process starting location for creating the file index comprises 
adding a predetermined offset to the first storage whting process starting location as a 
beginning of the file index. 

67. (Previously presented) The method according to claim 64 wherein the encrypted file 
index is stored only within the portions of random data on the device. 

68. (Currently amended) The method according to claim 64 in which afi-the encrypted 

file index is stored within one or more of the p ortions of random data by writing over 
random data portions within the storage device with the encrypted file index data. 

69. (Previously presented) The method according to claim 64 wherein the encrypted 
data set is stored only within the portions of random data. 

70. (Currently amended) The method according to claim 64 in which aft the encrypted 
data set is stored within one or more of the portions of random data by writing over 
random data portions within the storage device with the encrypted data set. 
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71 . (Previously presented) Tlie nnetliod according to claim 64 which further comprises a 
using the user input passphrase for generating a key for encrypting the file index. 

72. (Previously presented) The method according to claim 64 in which the passphrase 
is used for generating a key for encrypting the data set. 

73. (Previously presented) The method according to claim 64 in which the passphrase 
is used in selecting the second storage writing process starting location. 

74. (Currently amended) The method according to claim 64 in which at least one of the 
first location within one of the file -portions of random data, the second location within 
one of the file -portions of random data, a key for the file index and a key for the data set 
is determined by using at least one hash function to operate on the user input 
passphrase. 

75. (Currently amended) The method according to claim 64 in which the passphrase is 
operated on once to produce an output which is used for determining at least two of the 
first location within one of the fUe -portions of random data, the second location within 
one of the fite- portions of random data, a key for the file index and a key for the data set. 

76. (Currently amended) The method according to claim 64 in which the passphrase is 
operated on a plurality of times, each operation generating an output for use in 
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determining at least one of the first location within one of the file -portions of random 
data, the second location within one of the fUe -portlons of random data, a key for the file 
Index and a key for the data set. 

77. (Previously presented) The method according to claim 64 in which a common key Is 
used for encrypting the data set and for encrypting the file index. 

78. (Previously presented) The method according to claim 64 which comprises a step of 
storing further sets of data using said passphrase. 

79. (Previously presented) The method according to claim 78 which Is such that a 
respective location for each data set Is selected, each data set Is encrypted and stored 
at the respective location, and respective entries are added to the file Index. 

80. (Currently amended) The method according to claim 64, comprising a step of storing 
further file Indexes within one of the file -Dortlons of random data, each of which i ndoxos 
is associated with a respective passphrase and each of which I nd e x e s Is encrypted and 
Is stored at a location selected in dependence on the respective passphrase. 

81 . (Previously presented) The method according to claim 80 In which respective 
encryption keys are generated from the respective passphrases and these respective 
keys are used for encrypting data sets which are associated with each file Index. 
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82. (Currently amended) The method according to claim 80 comprising a step of 
selecting the passphrase for, and hence location for, an additional file index with 
knowledge of the respective passphrases corresponding to file indexes already stored 
in one of the file -portions of random data such that collisions may be avoided. 

83. (Currently amended) The method according to claim 80, in which, wh e r e there are a 
plurality of file indexes stored in one of the file -portions of random data, the method 
comprises a step of selecting a location for an additional data set with knowledge of the 
respective passphrases corresponding to file indexes already stored in one of the file 
portions of random data such that collisions may be avoided. 

84. (Currently amended) The method according to claim 80 comprising a step of storing 
additional data sets using a n additional passphrase whilst in ignorance of at least one 
other existing passphrase. 

85. (Currently amended) The method according to claim 80 comprising a step of storing 
data sets in a predetermined relationship to a respective file index to help prevent 
collisions, for example the data sets may be stored adjacent to a -the respective file 
index, the data sets may be stored substantially contiguously to a-the respective file 
index, and the data sets may be stored at locations close to but after a -the respective 
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86. (Currently amended) The method according to claim 64 comprising a step of storing 
data on a-the storage device carrying a plurality of files of random data. 

87. (Previously presented) The method according to claim 64 in which the file index 
comprises a message authentication code. 

88. (Previously presented) The method according to claim 87 in which the file index 
comprises a message authentication code of all associated data sets so as to facilitate 
detection of tampering. 

89. (Currently amended) The method according to claim 87 in which the file index 
comprises a message authentication code of one of the fite -Dortions of random data in 
its entirety for use in detecting other usage of one of the fite -portions of random data. 

90. (Previously presented) The method according to claim 64 comprising a step of pre 
processing the data set prior to encryption. 

91 . (Currently amended) The method according to claim 64 comprising a step of 
presenting a user with an indication of a location within one of the file -portions of 
random data that will be selected for the file index when using a predetermined 
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92. (Currently amended) The method according to claim 91 comprising a step of 
accepting user entered trial passphrases and providing a user with an indication of a 
location within one of the ftte -portions of random data that will be selected for the file 
index for each trial passphrase. 

93. (Currently amended) The method according to claim 91 comprising a further step of 
providing to a -the user an indication of the regions of one of the fite- portions of random 
data that are already occupied by file indexes having passphrases that have been 
supplied by a-the user. 

94. (Currently amended) The method according to claim 64 comprising a step of 
receiving an indication from a user of a location within one of the flte -portions of random 
data which a -the user desires to use for a -the f ile index. 

95. (Currently amended) The method according to claim 94 further comprising the-_a 
step of suggesting possible passphrases to a -the user in response to a -the user 
indicating a location within one of the file -portions of random data which a -the user 
desires to use for a-the file index, 



Application/Control Number: 10/588,657 Page 10 

Art Unit: 2166 

96. (Previously presented) The method according to claim 94 comprising steps of 
receiving a user input passphrase and suggesting a modified passphrase. 

97. (Previously presented) The method according to claim 96 in which the modification 
of the passphrase is selected so as to at least one of: move a location at which an 
associated index would be stored towards a desired location indicated by a user and 
strengthen the passphrase, 

98. (Currently amended) The method according to claim 64 comprising a step of 
deleting a-the data set stored on a-the storage device. 

99. (Previously presented) The method according to claim 98 comprising a step of 
removing a respective entry from the file index. 

100. (Currently amended) The method according to claim 99 in which the step of 
deleting a-the data set comprises a step of overwriting the data set with random data as 
well as removing the entry from the file index. 

101 . (Currently amended) The method according to claim 98 comprising a step of 
reorganizing data stored in association with a-the file index when at least one data set 
referenced in that file index is deleted. 
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102. (Currently amended) The method according to claim 100 in which the step of 
overwriting the data set comprises a step of using at least one random data and 
encrypted data stored in one of the file -portions of random data for generating pseudo- 
random data for overwriting deleted files. 

103. (Currently amended) The method according to claim 102 in which the method 
comprises a step of using random numbers from one of the file -portions of random data 
that would be overwritten when adding a further d ata set to replace any pseudo-random 
values previously used elsewhere within one of the file -portions of random data. 

104. (Previously presented) A computer storage device for steganographically 
concealing stored information, said device configured with at least one storage area 
having one or more portions of random data containing a file index and a predetermined 
data set, and software carrvina out steps wherein the file index is encrypted and is 
stored at a first location determined by an algorithmic process dependent upon a user 
passphrase, and the data set is encrypted and is stored at a second location 
determined using a process that is unconstrained by the process used to determine the 
first location, and the file index comprises an information indicative of the second 
location. 

105. (Previously presented) The storage device according to claim 104 further including 
application software stored thereon for execution by a computer to enable 
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steganographic storage extraction of data sets in the one or more portions of random 
data. 

106. (Previously presented) The storage device according to claim 104 in which the 
passphrase is used to generate a key for at least one of encrypting the file index and 
encrypting the data set. 

107. (Currently amended) The storage device according to claim 104 further comprising 
a software application stored by the storage device, the software comprising instructions 
that when loaded and executed by a computer cause the computer to perform at least 
one of the following operations: 

accepting a plurality of user input passphrases and generating corresponding 

encryption/decryption keys; 

determining respective storage writing process starting locations for storage of a 

plurality of storag e of file indexes; 

encrypting a-the oluralitv of file indexes; 

encrypting data sets; 

storing a -the plurality of file indexes; 

determining respective storage writing process starting locations for storing a plurality of 
data sets; 

storing a -the oluralitv of data sets; 

accepting one or more user input passphrases and using said one or more user input 
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passphrases for locating and decrypting the respective file indexes; 
locating one or more encrypted data sets stored within the storage device: decrypting 
the one or more encrypted data sets stored within the storage device; and 
outputting the one or more decrypted data sets stored within the storage device as an 
encrypted data set. 

108. (Previously presented) The storage device according to claim 104 further including 
a conventional file allocation table stored thereon. 

109. (Previously presented) The storage device according to claim 104 wherein at least 
a portion of the device comprises a Read Only Memory (ROM). 

110. (Currently amended) The storage device according to claim 108 further comma 
Read Only Memory (ROM) portion wherein is stored the file allocation table, the 
software and an operating system header file. 

111. (Previously presented) The storage device according to claim 104 wherein the 
device is operable as a removable storage device. 

112. (Previously presented) The storage device according to claim 104 wherein the 
device is assigned a particular identifying serial number. 
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113. (Currently amended) The storage device according to claim 104 further including a 
unique hard coded identifier data stored in memory contained therein said identifier data 
for use by a computer for at least one of: 

a) an encryption process used for encrypting at least one of the file index and the data 
set : and 

b) a decryption process used for decrypting at least one of the file index and the data 
set. 

114. (Previously presented) The storage device according to claim 104 wherein the 
storage device has the appearance of a conventional portable memory storage device. 

115. (Currently amended) A computer arranged under the control of software, said 
computer executing software instructions for steggnographically storing a data set on a 
storage device within one or more portions of random data contained on said storage 
device, said computer comprising: 

programmable logic circuitry configured to determine a first location within the storage 
device for initiating a first storage writing process for storing a file index; 
selecting programmable logic circuitry configured to determine a second storage writing 
process starting location at a second offset within the storage device for storing the data 
set where said storage writing process starting location is determined independently 
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from the process used to select the first location : 

programmable logic circuitry configured to encrypt the data set; 

programmable logic circuitry configured to write the encrypted data set using the-a_the 

second storage writing process beginning at the second storage writing process starting 

location in a portion of random data; 

programmable logic circuitry configured to create a file index including an entry in the 
file index in respect of the data set, the entry comprising an indication of the second 
storage writing process starting location; 

programmable logic circuitry configured to encrypt the file index; and programmable 
logic circuitry configured to write the encrypted file index using the first storage writing 
process beginning at the first storage writing process starting location in the file -portion 
of random data. 

1 1 6. (Previously presented) The computer according to claim 1 1 5 further comprising 
programmed logic circuitry configured by said software to provide a user with an 
indication of a location within a portion of random data that will be used for storing the 
file index corresponding to a particular, passphrase input by a user. 

117. (Currently amended) The computer according to claim 1 15 which is arranged 
under the control of software to accept user entered trial passphrases and provide a 
user with an indication of a location within the file -portion of random data that will be 
selected for storing the file index for each trial passphrase. 
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118. (Currently amended) The computer according to claim 1 15 which is arranged 
under the control of software to provide a user an indication of regions of the file -portion 
of random data that are already occupied by file indexes having passphrases that have 
been supplied by a user. 

119. (Currently amended) The computer according to claim 1 15 which is arranged 
under the control of software to suggest possible passphrases to a user in response to 
a user indicating a location within the file -portion of random data which a user desires to 
use for storing a-the file index. 

120. (Previously presented) The computer according to claim 1 16 which is arranged 
under the control of software to present a user interface for displaying the indications. 

121. (Currently amended) The computer according to claim 120 in which the user 
interface is arranged so that a user can use a pointing device to indicate a location 
within the file -portion of random data which a user desires to use for storing a -the f ile 
index. 

122. (Currently amended) A method of extracting a data set steganographically stored 
on a storage device having one or more portions random data containing a file index 
and a predetermined data set, wherein the file index is encrypted and is stored at a first 
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location determined by an algorithmic process dependent upon a user input 
passphrase, and the data set is encrypted and is stored at a second location 
determined using a process that is unconstrained by the process used to determine the 
first location, and the file index comprises information indicative of the second location, 

comprising: 

using a user input passphrase to determine a location for a-the file index based upon 
the user input passphrase; 
decrypting the file index; 

identifying a location of a -the data set from the decrypted file index; and decrypting the 
data set stored at the identified location. 

123. (Currently amended) A computer arranged under the control of software to extract 
data using Tthe method according to claim 122. 

124. (Currently amended) A method of storing a data set on a storage device 
comprising: 

determining a first location within the storage device for initiating a first storage writing 
process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage device for storing the data set,, said second offset 
determined using a process that is independent of a process used to generate said first 
offse t location : 
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encrypting the data set; 

writing the encrypted data set using the-a_second storage writing process beginning at 
the second storage writing process starting location in a portion of random data; 
creating a file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 
encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location, whoro i n t he method further comprisinges, 
prior to a user finalizing tt^a_user input passphrase, accepting input of at least one 
user input trial passphrase and providing a user with an indication of a location within 
the portion of random data that will be determined for creating a -the f ile index 
associated with the at least one user input trial passphrase. 

125. (Currently amended) A computer readable data storage medium, said storage 
medium storing a computer program comprising code portions which when executed a 
computer cause the computer to perform steps of: 

determining a first location within the storage d e v i c e medium for initiating a first storage 
writing process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage dov i co medium for storing the-a_data set said second offset determined 
using a process that is independent of a process used to determine said first location 
offset; encrypting the data set; 
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writing the encrypted data set using tl=ie-a_second storage writing process beginning at 
the second storage writing process starting location in a portion of random data; 
creating a -the f ile index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location in the portion f ile of random data. 

126. (Currently amended) A method of storing a data set on a storage device having a 
data storage area that is initialized with one or more portions of a data otorago aroa that 
are i n i t i a li z e d w i th random data comprising the steps of 
determining a first writing process starting location within a data storage portion 

initialized with random data for creating a file index; 

determining a second writing process starting location within a data storage portion 
initialized with random data for storing the data set, said second writing process starting 
location determined using a process that is unconstrained by a process used to 
determine said first writing process starting location; 
encrypting the data set; 

storing the encrypted data set beginning at the second writing process starting location, 
using only data storage portions initialized with random data; 

making an entry in the file index indicative of which portions of the data storage device 
initialized with random data are to be used to store the data set, wherein an indication of 
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the second writing process starting location is determinable from the file index; 
encrypting the file index; and storing the encrypted file index at the first Go l cctod 
determined location in the data storage area initialized with random data. 

127. (Currently amended) The method according to claim 126 wherein the step of 
ensuring that an indication of the second oo l cctod determined location is determinable 
from the file index comprises the step of 

making an entry in the file index in respect of the data set, the entry comprising an 
indication of the second s ele ct e d determined location. 

128. (Currently amended) The method according to claim 126 wherein the step of 
Go l oct i nq determining a first location within the data storage area initialized with random 

data for storing a -the file index, comprises 

the step of scloct i na determining t he first location from a plurality of predetermined 
possible locations within the data storage area initialized with random data, in 
dependence on one of: an input received from a user; and a selection process which is 
independent of user input. 

129. (Currently amended) The method according to claim 126 wherein the step of 
Go l oct i ng determining a first location within the data storage area initialized with random 
data for storing a file, comprises steps of selecting the first location in dependence on a 
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user input passplirase and associating the file index with the user input passphrase. 

130. (Previously presented) The method according to claim 129 wherein said data set is 
stored under protection of said user input passphrase and the method comprising a 
further step of storing a second data set on the storage device under protection of a 
second user input passphrase, the step of storing the second data set on the storage 
device comprising steps of: 

selecting, in dependence on the second user input passphrase, a third location within 
the data storage area initialized with random data for storing a second file index; 
selecting a fourth location within the data storage area initialized with random data for 
storing the second data set; 
encrypting the second data set; 

storing the encrypted second data set at the fourth selected location in the data storage 
area initialized with random data; 

ensuring that an indication of the fourth selected location is determinable from the 
second file index; 

encrypting the second file index; and storing the encrypted second file index at the third 
selected location in the data storage area initialized with random data, and comprising, 
before the step of encrypting the second file index, a further step of recording in the 
second file index an indication of which parts of the data storage area initialized with 
random data will be used to store said second data set. 
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131 . (Previously presented) The method according to claim 126 wherein the data 
storage area initialized with random data is reserved for use in storing data. 

132. (Previously presented) The method according to claim 126 wherein the data 
storage area initialized with random data comprises a file of random data which is 
managed by a conventional file system on a computer. 

133. (Currently amended) A removable storage device comprising a data storage area 
initialized with random data, wherein a file index and a data set are stored in the data 
storage area initialized with random data, and software carrying out steps wherein the 
file index is encrypted and stored at a first location within the data storage area 
initialized with random data, the data set is encrypted and stored at a second location 
within the data storage area initialized with random data where said second location is 
determined independently from the process used to determine the first location , the file 
index comprises an entry in respect of the data set, the entry comprising an indication of 
the second location within the data storage area initialized with random data, and the 
file index comprises an indication of which parts of the data storage area initialized with 
random data are in use to store said data set. 

134. (Currently amended) A removable storage device carrying software and 
comprising a data storage area initialized with random data, the software comprising 
code portions which when loaded and run on a computer cause the computer to 
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execute a method of storing a data set on the storage device, the method comprising 
the steps of: 

selecting a first location within the data storage area initialized with random data for 
storing a file index; 

selecting a second location within the data storage area initialized with random data for 
storing the data set where said second location is determined independently from the 
process used to select the first location : 
encrypting the data set; 

storing the encrypted data set at the second selected location in the data storage area 
initialized with random data; 

ensuring that an indication of the second selected location is determinable from the file 
index; 

encrypting the file index; and 

storing the encrypted file index at the first selected location in the data storage area 
initialized with random data, and comprising, before the step of encrypting the file index, 
a further step of recording in the file index an indication of which parts of the data 
storage area initialized with random data will be used to store said data set. 

135. (Original) A method of storing a data set on a storage device having one or more 
portions of random data, comprising: 

determining a first storage writing process starting location at a first offset within a 
portion of random data for initiating a first storage writing process for storing a data set; 
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determining a second storage writing process starting location at a second offset witliin 
a portion of random data for initiating a second storage writing process tliat creates a 
file index, 

said second offset determined independently from a process used to generate the first 
offset; 

encrypting the data set; 

writing the encrypted data set using said first storage writing process beginning at said 
first storage writing process starting location; 

creating a file index having an entry in respect of the data set, the entry comprising at 
least an indication of the first storage writing process starting location; 
encrypting the file index; and 

writing the encrypted file index using said second storage writing process beginning at 
said second storage writing process starting location. 

136. (Original) The method of claim 135 wherein said second offset is determined using 
an algorithm that is dependent upon an input passphrase. 

Allowable Subject Matter 

4. Claims 64-136 are allowed. 

The following is an examiner's statement of reasons for allowance: The closest prior art 
of record is Rhoads (US 5,636,292), Brundrett et al. (US 6,249,866), Orrin et al. (US 



Application/Control Number: 10/588,657 Page 25 

Art Unit: 2166 

6,01 1 ,849), Coppersmith et al. (US 5,454,039), StegFS: "A Steganographic File 
System" PANG et al., "The Steganographic File System" Anderson et al., and "GBDE - 
GEOM Based Disk Encryption" Poul-Henning Kamp. While all of the prior art mentioned 
above deals with encryption of files or a file system, they do not individually or in 
combination disclose all of the limitations within the instant application. Specifically the 
claimed language of the instant application provides a conventional file index and files 
referenced by a file index which are separately, steganographically encrypted onto a 
storage device. While the prior art does provide files which are encrypted, a smaller 
subset provide steganographic encryption which is specifically used to hide the 
existence of data and no reference provides a file index which is encoded separately 
and using a different process than that of the data which is referenced. Originally the 
examiner made a rejection which combines a conventional file system with conventional 
steganographic encryption. The only manner in which obviousness can be maintained 
in this scenario is If a static file system including the index and all files is taken as an 
entire block and encrypted. Of course in this scenario, encryption would not be with 
separate processes, but with one unified process causing the data to be locked in the 
current image instead of the updatable manner described within the instant application. 
While the examiner feels that it may have been "obvious to try" encrypting via separate 
processes in order to allow easier ability to update, this is not show with any of the 
above referenced prior art and additionally overcoming the deficiencies provided with a 
simple combination are not in themselves obvious and require an inventive step. 
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The dependent claims which are definite and enable by the specification and 
being further limiting to the independent claims are also allowed. 

Any comments considered necessary by applicant must be submitted no later 

than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the Issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

Any Inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRUCE A. WITZENBURG whose telephone number is 
(571)270-1908. The examiner can normally be reached on M-F 9:00 - 6:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hosain Alam can be reached on 571-272-3978. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Bruce A Witzenburg/ 
Examiner, Art Unit 2166 
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